CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-01-12
Microsoft Defender Remote Code Execution Vulnerability (CVE-2021-1647) Security Advisory
[Affected Scope] All Windows systems running Microsoft Malware Protection Engine (MpEngine) versions prior to 1.1.17700.4
[Impact] Attackers can execute arbitrary code with SYSTEM privileges and fully compromise the host by placing a crafted file that triggers automatic scanning by Defender
[Mitigation] Immediately update the Microsoft Defender engine to version 1.1.17700.4 or higher and verify that automatic updates are enabled